[SECURITY] [DSA 1839-1] New gst-plugins-good0.10 packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1839-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 19, 2009 http://www.debian.org/security/faq -...

Ubuntu USN-789-1 (gst-plugins-good0.10)

The remote host is missing an update to gst-plugins-good0.10 announced via advisory USN-789-1. OpenVAS Vulnerability Test $Id: ubuntu7891.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7891.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-789-1...

Ubuntu: Security Advisory (USN-789-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200903-33 (ffmpeg gst-plugins-ffmpeg mplayer)

The remote host is missing updates announced in advisory GLSA 200903-33. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200903-33 (ffmpeg gst-plugins-ffmpeg mplayer)

The remote host is missing updates announced in advisory GLSA 200903-33. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Ubuntu Update for gst-plugins-good0.10 vulnerability USN-611-3

Ubuntu Update for Linux kernel vulnerabilities USN-611-3 OpenVAS Vulnerability Test $Id: gbubuntuUSN6113.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for gst-plugins-good0.10 vulnerability USN-611-3 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-611-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-0586

Integer overflow in the gstvorbistagaddcoverart function gst-libs/gst/tag/gstvorbistag.c in vorbistag in gst-plugins-base aka gstreamer-plugins-base before 0.10.23 in GStreamer allows context-dependent attackers to execute arbitrary code via a crafted COVERART tag that is converted from a base64...

CVE-2009-0586

GStreamer vulnerability CVE-2009-0586 affects gst-plugins-base prior to 0.10.23. The issue is an integer overflow in the Vorbis cover art handling (gst_vorbis_tag_add_coverart) when a COVERART tag is base64-decoded, triggering a heap-based buffer overflow. This could allow arbitrary code executio...

CVE-2009-0586: Integer Overflow or Wraparound

Integer overflow in the gstvorbistagaddcoverart function gst-libs/gst/tag/gstvorbistag.c in vorbistag in gst-plugins-base aka gstreamer-plugins-base before 0.10.23 in GStreamer allows context-dependent attackers to execute arbitrary code via a crafted COVERART tag that is converted from a base64...

Debian: Security Advisory (DSA-1729-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1729-1 : gst-plugins-bad0.10 - several vulnerabilities

Several vulnerabilities have been found in gst-plugins-bad0.10, a collection of various GStreamer plugins. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0386 Tobias Klein discovered a buffer overflow in the quicktime stream demuxer qtdemux, which...

CVE-2009-0397

Heap-based buffer overflow in the qtdemuxparsesamples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins aka gst-plugins-good 0.10.9 through 0.10.11, and GStreamer Plug-ins aka gstreamer-plugins 0.8.5, might allow remote attackers to execute arbitrary code via crafted Time-to-sample aka...

CVE-2009-0397

CVE-2009-0397 affects GStreamer: deprecated heap-based buffer overflow in qtdemux_parse_samples in gst/qtdemux/qtdemux.c, impacting GStreamer Good Plug-ins 0.10.9–0.10.11 and GStreamer plug-ins 0.8.5. A crafted QuickTime .mov file could allow remote code execution. According to the connected advi...

CVE-2009-0398: Improper Restriction of Operations within the Bounds of a Memory Buffer

Array index error in the gstqtptrakhandler function in gst/qtdemux/qtdemux.c in GStreamer Plug-ins aka gstreamer-plugins 0.6.0 allows remote attackers to have an unknown impact via a crafted QuickTime media file...

Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : gst-plugins-good0.10 vulnerability (USN-611-3)

USN-611-1 fixed a vulnerability in Speex. This update provides the corresponding update for GStreamer Good Plugins. It was discovered that Speex did not properly validate its input when processing Speex file headers. If a user or automated system were tricked into opening a specially crafted Spee...

libmodplug 's3m' Remote Buffer Overflow Vulnerability

No description provided by source. /The libmodplug library is prone to a remote buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running ...